Still fuming over HTTPS mishap, Google makes Symantec an offer it can’t refuse

[zigzag3143]

Google has given Symantec an offer it can't refuse: give a thorough accounting of its ailing certificate authority process or risk having the world's most popular browser—Chrome—issue scary warnings when end users visit HTTPS-protected websites that use Symantec credentials.
The ultimatum, made in a blog post published Wednesday afternoon, came five weeks after Symantec fired an undisclosed number of employees caught issuing unauthorized transport layer security certificates. The mis-issued certificates made it possible for the holders to impersonate HTTPS-protected Google webpages.

Still fuming over HTTPS mishap, Google makes Symantec an offer it can?t refuse | Ars Technica

 

[Digerati]

The world's most popular browser? I think that depends on who you listen too. NetMarketShare. In any case, Chrome has a huge share!

But good for Google for calling Symantec out on this. The problem is actually worse than the blog reports as issuing certs for unregistered domains is prohibited but Symantec did that for over 2400 of them, in addition to the registered domains.

Google is giving Symantec until next June to sort this out. I think that is being a bit too generous.